Malicious WSF File analysis – 25e6ab99f024

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

File

Type

Windows Script File (WSF)

Detection

PeID

Borland Delphi 7 - Nstd EP - ASL sign MASM/TASM - sig4 (h)Microsoft Visual C++ v6.0 DLLUPolyX 0.3 -> delikon

1 malicious · 13 files

WSF25e6ab99f024b540783cace2a156ad07

Structure

BINResources

Config. Field	Value
URL #1	https:huhuhuhuhuhuhuhuhuhuhu
URL #2	http:/huhuhuhuhuhuhuhuhuhuhu
URL #3	http:/huhuhuhuhuhuhuhuhuhuhu
URL #4	http:/huhuhuhuhuhuhuhuhuhuhu
URL #5	http:/huhuhuhuhuhuhuhuhuhuhu
URL #6	http:/huhuhuhuhuhuhuhuhuhuhu
URL #7	http:/huhuhuhuhuhuhuhuhuhuhu
URL #8	http:/huhuhuhuhuhuhuhuhuhuhu
URL #9	https:huhuhuhuhuhuhuhuhuhuhu
URL #10	https:huhuhuhuhuhuhuhuhuhuhu
URL #11	https:huhuhuhuhuhuhuhuhuhuhu
URL #12	https:huhuhuhuhuhuhuhuhuhuhu
URL #13	https:huhuhuhuhuhuhuhuhuhuhu
URL #14	https:huhuhuhuhuhuhuhuhuhuhu
URL #15	https:huhuhuhuhuhuhuhuhuhuhu
URL #16	https:huhuhuhuhuhuhuhuhuhuhu
URL #17	https:huhuhuhuhuhuhuhuhuhuhu
URL #18	https:huhuhuhuhuhuhu
URL #19	https:huhuhuhuhuhuhu
URL #20	https:huhuhuhuhuhuhuhuhuhuhu
URL #21	https:huhuhuhuhuhuhuhuhuhuhu
URL #22	https:huhuhuhuhuhuhu
URL #23	https:huhuhuhuhuhuhuhuhuhuhu
URL #24	https:huhuhuhuhuhuhu
URL #25	https:huhuhuhuhuhuhu
URL #26	https:huhuhuhuhuhuhu
URL #27	https:huhuhuhuhuhuhuhuhuhuhu
URL #28	https:huhuhuhuhuhuhuhuhuhuhu
URL #29	https:huhuhuhuhuhuhu
URL #30	https:huhuhuhuhuhuhuhuhuhuhu
URL #31	https:huhuhuhuhuhuhu
URL #32	https:huhuhuhuhuhuhuhuhuhuhu
URL #33	https:huhuhuhuhuhuhuhuhuhuhu
URL #34	https:huhuhuhuhuhuhu
URL #35	https:huhuhuhuhuhuhu
URL #36	https:huhuhuhuhuhuhuhuhuhuhu
URL #37	https:huhuhuhuhuhuhuhuhuhuhu
URL #38	https:huhuhuhuhuhuhuhuhuhuhu
URL #39	https:huhuhuhuhuhuhuhuhuhuhu
URL #40	https:huhuhuhuhuhuhuhuhuhuhu
URL #41	https:huhuhuhuhuhuhuhuhuhuhu
URL #42	https:huhuhuhuhuhuhuhuhuhuhu
URL #43	https:huhuhuhuhuhuhu
URL #44	https:huhuhuhuhuhuhuhuhuhuhu
URL #45	https:huhuhuhuhuhuhuhuhuhuhu
URL #46	https:huhuhuhuhuhuhuhuhuhuhu
URL #47	https:huhuhuhuhuhuhuhuhuhuhu
URL #48	https:huhuhuhuhuhuhu
URL #49	https:huhuhuhuhuhuhuhuhuhuhu
URL #50	https:huhuhuhuhuhuhuhuhuhuhu
URL #51	https:huhuhuhuhuhuhu
URL #52	https:huhuhuhuhuhuhuhuhuhuhu
URL #53	https:huhuhuhuhuhuhuhuhuhuhu
URL #54	https:huhuhuhuhuhuhuhuhuhuhu
URL #55	https:huhuhuhuhuhuhuhuhuhuhu
URL #56	https:huhuhuhuhuhuhuhuhuhuhu
URL #57	https:huhuhuhuhuhuhuhuhuhuhu
URL #58	https:huhuhuhuhuhuhuhuhuhuhu
URL #59	https:huhuhuhuhuhuhuhuhuhuhu
URL #60	https:huhuhuhuhuhuhuhuhuhuhu
URL #61	https:huhuhuhuhuhuhuhuhuhuhu
URL #62	https:huhuhuhuhuhuhuhuhuhuhu
URL #63	https:huhuhuhuhuhuhuhuhuhuhu
URL #64	https:huhuhuhuhuhuhuhuhuhuhu
URL #65	https:huhuhuhuhuhuhuhuhuhuhu
URL #66	http:/huhuhuhuhuhuhuhuhuhuhu
URL #67	https:huhuhuhuhuhuhuhuhuhuhu
URL #68	https:huhuhuhuhuhuhuhuhuhuhu
URL #69	https:huhuhuhuhuhuhuhuhuhuhu
URL #70	https:huhuhuhuhuhuhuhuhuhuhu
URL #71	https:huhuhuhuhuhuhuhuhuhuhu
URL #72	https:huhuhuhuhuhuhuhuhuhuhu
URL #73	https:huhuhuhuhuhuhuhuhuhuhu
URL #74	https:huhuhuhuhuhuhuhuhuhuhu
URL #75	https:huhuhuhuhuhuhuhuhuhuhu
URL #76	https:huhuhuhuhuhuhuhuhuhuhu
URL #77	https:huhuhuhuhuhuhuhuhuhuhu
URL #78	https:huhuhuhuhuhuhuhuhuhuhu
URL #79	https:huhuhuhuhuhuhuhuhuhuhu
URL #80	https:huhuhuhuhuhuhuhuhuhuhu
URL #81	httpshuhuhuhuhuhuhu
URL #82	https:huhuhuhuhuhuhuhuhuhuhu
URL #83	https:huhuhuhuhuhuhuhuhuhuhu
URL #84	https:huhuhuhuhuhuhuhuhuhuhu
URL #85	https:huhuhuhuhuhuhuhuhuhuhu
URL #86	https:huhuhuhuhuhuhuhuhuhuhu
URL #87	https:huhuhuhuhuhuhuhuhuhuhu
URL #88	http:/huhuhuhuhuhuhuhuhuhuhu
URL #89	https:huhuhuhuhuhuhuhuhuhuhu
URL #90	http:/huhuhuhuhuhuhu
URL #91	http:/huhuhuhuhuhuhuhuhuhuhu
URL #92	http:/huhuhuhuhuhuhu
URL #93	http:/huhuhuhuhuhuhuhuhuhuhu
URL #94	http:/huhuhuhuhuhuhuhuhuhuhu
URL #95	https:huhuhuhuhuhuhu
URL #96	http:/huhuhuhuhuhuhuhuhuhuhu
URL #97	https:huhuhuhuhuhuhuhuhuhuhu
URL #98	http:/huhuhuhuhuhuhu
URL #99	http:/huhuhuhuhuhuhuhuhuhuhu
URL #100	http:/huhuhuhuhuhuhuhuhuhuhu
URL #101	https:huhuhuhuhuhuhuhuhuhuhu
URL #102	http:/huhuhuhuhuhuhu
URL #103	http:/huhuhuhuhuhuhuhuhuhuhu
URL #104	http:/huhuhuhuhuhuhuhuhuhuhu
URL #105	http:/huhuhuhuhuhuhuhuhuhuhu
URL #106	http:/huhuhuhuhuhuhuhuhuhuhu
URL #107	http:/huhuhuhuhuhuhuhuhuhuhu
URL #108	http:/huhuhuhuhuhuhu
URL #109	http:/huhuhuhuhuhuhuhuhuhuhu
URL #110	https:huhuhuhuhuhuhuhuhuhuhu
URL #111	http:/huhuhuhuhuhuhuhuhuhuhu
URL #112	http:/huhuhuhuhuhuhu
URL #113	http:/huhuhuhuhuhuhuhuhuhuhu
URL #114	http:/huhuhuhuhuhuhu
URL #115	http:/huhuhuhuhuhuhuhuhuhuhu
URL #116	http:/huhuhuhuhuhuhuhuhuhuhu
URL #117	http:/huhuhuhuhuhuhuhuhuhuhu
URL #118	http:/huhuhuhuhuhuhuhuhuhuhu
URL #119	https:huhuhuhuhuhuhuhuhuhuhu
URL #120	https:huhuhuhuhuhuhuhuhuhuhu
URL #121	https:huhuhuhuhuhuhuhuhuhuhu
URL #122	https:huhuhuhuhuhuhuhuhuhuhu
URL #123	http:/huhuhuhuhuhuhu
URL #124	http:/huhuhuhuhuhuhuhuhuhuhu
URL #125	https:huhuhuhuhuhuhuhuhuhuhu
URL #126	http:/huhuhuhuhuhuhuhuhuhuhu
URL #127	http:/huhuhuhuhuhuhuhuhuhuhu
URL #128	http:/huhuhuhuhuhuhu
URL #129	http:/huhuhuhuhuhuhuhuhuhuhu
URL #130	https:huhuhuhuhuhuhuhuhuhuhu
URL #131	http:/huhuhuhuhuhuhuhuhuhuhu
URL #132	http:/huhuhuhuhuhuhuhuhuhuhu
URL #133	http:/huhuhuhuhuhuhuhuhuhuhu
URL #134	http:/huhuhuhuhuhuhuhuhuhuhu
URL #135	http:/huhuhuhuhuhuhuhuhuhuhu
URL #136	http:/huhuhuhuhuhuhuhuhuhuhu
URL #137	https:huhuhuhuhuhuhuhuhuhuhu
URL #138	http:/huhuhuhuhuhuhuhuhuhuhu
URL #139	http:/huhuhuhuhuhuhuhuhuhuhu
URL #140	http:/huhuhuhuhuhuhuhuhuhuhu
URL #141	http:/huhuhuhuhuhuhuhuhuhuhu
URL #142	http:/huhuhuhuhuhuhuhuhuhuhu
URL #143	http:/huhuhuhuhuhuhu
URL #144	http:/huhuhuhuhuhuhuhuhuhuhu
URL #145	http:/huhuhuhuhuhuhuhuhuhuhu
URL #146	http:/huhuhuhuhuhuhuhuhuhuhu
URL #147	http:/huhuhuhuhuhuhuhuhuhuhu
URL #148	http:/huhuhuhuhuhuhuhuhuhuhu
URL #149	https:huhuhuhuhuhuhuhuhuhuhu
URL #150	https:huhuhuhuhuhuhuhuhuhuhu
URL #151	https:huhuhuhuhuhuhuhuhuhuhu
URL #152	https:huhuhuhuhuhuhuhuhuhuhu
URL #153	https:huhuhuhuhuhuhuhuhuhuhu
URL #154	http:/huhuhuhuhuhuhuhuhuhuhu
URL #155	http:/huhuhuhuhuhuhu
URL #156	http:/huhuhuhuhuhuhuhuhuhuhu
URL #157	http:/huhuhuhuhuhuhuhuhuhuhu
URL #158	http:/huhuhuhuhuhuhuhuhuhuhu
URL #159	https:huhuhuhuhuhuhuhuhuhuhu
URL #160	http:/huhuhuhuhuhuhuhuhuhuhu
URL #161	http:/huhuhuhuhuhuhuhuhuhuhu
URL #162	http:/huhuhuhuhuhuhuhuhuhuhu
URL #163	https:huhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

PDB Path PATH

D:\a\_huhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential